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METHOD AND APPARATUS FOR SUPPORTING 
COOKIE MANAGEMENT IN A WEB PRESENTATION 

ARCHITECTURE 

BACKGROUND OF THE RELATED ART 
[0001] This section is intended to introduce the reader to various aspects of 

art, which may be related to various aspects of the present invention that are described 
and/or claimed below. This discussion is believed to be helpful in providing the 
reader with background information to facilitate a better understanding of the various 
aspects of the present invention. Accordingly, it should be understood that these 
statements are to be read in this light, and not as admissions of prior art. 

[0002] Presentations and applications are continuously developing on the 

World Wide Web (the "Web), which has undergone an explosive growth in recent 
years. Early Web applications largely involved simple presentations of data, such as 
a corporate website displaying personnel information, contact information, and other 
static information. However, the current trend of Web applications involves a 
dynamic exchange of data, complicated logic and functionality, animated graphics, 
and an international focus. As a result, the content and functionality of Web 
applications are becoming increasingly complex and difficult to manage. A cookie is 
one such informational object that is used to transfer information between a web 
application and a web server. 

[0003] In any web application, it is common to set cookie values so that the 

browser can keep some notion of application state. Unfortunately, multiple actions 
can invoke a particular cookie without knowledge of one another. Accordingly, 
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each of the multiple actions can potentially erase or change the cookie values set 
by the other actions. Accordingly, a need exists for a simple and efficient technique 
for handling cookies in scenarios having multiple actions invoking a particular 
cookie. 

BRIEF DESCRIPTION OF THE DRAWINGS 
[0004] Advantages of one or more disclosed embodiments may become 

apparent upon reading the following detailed description and upon reference to the 
drawings in which: 

[0005] FIG. 1 is a block diagram that illustrates a model-view-controller 

("MVC") application architecture, which may be created using embodiments of the 
present invention; 

[0006] FIG. 2 is a block diagram that illustrates a web presentation 

architecture in accordance with embodiments of the present invention; and 

[0007] FIG. 3 is a block diagram that illustrates the operation of a web 

application program created using a web presentation architecture in accordance 
with embodiments of the present invention. 

DETAILED DESCRIPTION 
[0008] One or more specific embodiments of the present invention will be 

described below. In an effort to provide a concise description of these 
embodiments, not all features of an actual implementation are described in the 
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specification. It should be appreciated that in the development of any such actual 
implementation, as in any engineering or design project, numerous 
implementation-specific decisions must be made to achieve the developers' 
specific goals, such as compliance with system-related and business-related 
constraints, which may vary from one implementation to another. Moreover, it 
should be appreciated that such a development effort might be complex and time 
consuming, but would nevertheless be a routine undertaking of design, fabrication, 
and manufacture for those of ordinary skill having the benefit of this disclosure. 

[0009] FIG. 1 is a block diagram that illustrates a model-view-controller 

("MVC") application architecture, which may be created using embodiments of the 
present invention. As illustrated, the MVC architecture 10 separates the application 
object or model 12 from a view 16, which is responsible for receiving an input and 
presenting an output to a client 14. In a web application context, the client 14 may 
comprise a browser. The model object and the view are also separated from the 
control functions of the application, which are represented in FIG. 1 as a controller 
18. In general, the model 12 comprises an application state 20, the view 16 comprises 
presentation logic 22, and the controller 18 comprises control and flow logic 24. By 
separating these three MVC objects 12, 16, and 18 with abstract boundaries, the 
MVC architecture 10 may provide flexibility, organization, performance, efficiency, 
and reuse of data, presentation styles, and logic. 

[0010] The WPA 100 may be configured with a variety of object-oriented 

programming languages, such as Java by Sun Microsystems, Inc., Santa Clara, 
California. An object is generally an item that can be individually selected and 
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manipulated. In object-oriented programming, an object may comprise a self- 
contained entity having data and procedures to manipulate the data. For example, a 
Java-based system may utilize a variety of JavaBeans, servlets, Java Server Pages, 
and so forth. JavaBeans are independent, reusable software modules. In general, 
JavaBeans support introspection (a builder tool can analyze how a JavaBean works), 
customization (developers can customize the appearance and behavior of a 
JavaBean), events (JavaBeans can communicate), properties (developers can 
customize and program with JavaBeans), and persistence (customized JavaBeans can 
be stored and reused). JSPs provide dynamic scripting capabilities that work in 
tandem with HTML code, separating the page logic from the static elements. 
According to certain embodiments, the WPA 100 may be designed according to the 
Java 2 Platform Enterprise Edition (J2EE), which is a platform-independent, Java- 
centric environment for developing, building and deploying multi-tiered Web-based 
enterprise applications online. 

[0011] The model 12 comprises a definitional framework representing the 

application state 20. For example, in a web-based application, the model 12 may 
comprise a JavaBean object or other suitable means for representing the application 
state 20. Regardless of the application or type of object, an exemplary model 12 may 
comprise specific data and expertise or ability (methods) to get and set the data (by 
the caller). The model 12 generally focuses on the intrinsic nature of the data and 
expertise, rather than the extrinsic views and extrinsic actions or business logic to 
manipulate the data. However, depending on the particular application, the model 12 
may or may not contain the business logic along with the application state. For 
example, a large application having an application tier may place the business logic in 
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the application tier rather than the model objects 12 of the web application, while a 
small application may simply place the business logic in the model objects 12 of the 
web application. 

[0012] As noted above, the view and controller objects 16 and 18 separately 

address these extrinsic views and actions or business logic. For example, the model 
12 may represent data relating to a person (e.g., an address, a birth date, phone 
number, etc.), yet the model 12 is independent of extrinsic formats (e.g., a date 
format) for displaying the personal data or extrinsic actions for manipulating the 
personal data (e.g., changing the address or phone number). Similarly, the model 12 
may represent data and expertise to track time (e.g., a clock), yet the model 12 is 
independent of specific formats for viewing the clock (e.g., analog or digital clock) or 
specific actions for manipulating the clock (e.g., setting a different time zone). These 
extrinsic formats and extrinsic actions are simply not relevant to the intrinsic behavior 
of the model clock object. One slight exception relates to graphical model objects, 
which inherently represent visually perceptible data. If the model 12 represents a 
particular graphical object, then the model 12 has expertise to draw itself while 
remaining independent of extrinsic formats for displaying the graphical object or 
extrinsic actions for creating or manipulating the graphical object. 

[0013] The view 16 generally manages the visually perceptible properties and 

display of data, which may be static or dynamic data derived in whole or in part from 
one or more model objects 12. As noted above, the presentation logic 22 functions to 
obtain data from the model 12, format the data for the particular application, and 
display the formatted data to the client 14. For example, in a web-based application, 
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the view 16 may comprise a Java Server Page (JSP page) or an HTML page having 
presentation logic 22 to obtain, organize, format, and display static and/or dynamic 
data. Standard or custom action tags (e.g., jspiuseJavaBean) may function to retrieve 
data dynamically from one or more model objects 12 and insert model data within the 
JSP pages. In this manner, the MVC architecture 10 may facilitate multiple different 
views 16 of the same data and/or different combinations of data stored by one or 
more model objects 12. 

[0014] The controller 18 functions as an intermediary between the client 14 

and the model object 12 and view 16 of the application. For example, the controller 
18 can manage access by the view 16 to the model 12 and, also, manage notifications 
and changes of data among objects of the view 16 and objects of the model 12. The 
control and flow logic 24 of the controller 18 also may be subdivided into model- 
controllers and view-controllers to address and respond to various control issues of 
the model 12 and the view 16, respectively. Accordingly, the model-controllers 
manage the models 12 and communicate with view-controllers, while the view- 
controllers manage the views 16 and communicate with the model-controllers. 
Subdivided or not, the controllers 18 ensure communication and consistency between 
the model 12 and view 16 and the client 14. 

[0015] In operation, the control and flow logic 24 of the controller 1 8 

generally receives requests from the client 14, interprets the client requests, identifies 
the appropriate logic function or action for the client requests, and delegates 
responsibility of the logic function or action. Requests may be received from the 
client via a number of protocols, such as Hyper Text Transfer Protocol ("HTTP") or 
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HTTP with Secure Sockets Layer ("HTTPS")- Depending on the particular scenario, 
the appropriate logic function or action of the controller 18 may include direct or 
indirect interaction with the view 16 and/or one or more model objects 12. For 
example, if the appropriate action involves alteration of extrinsic properties of data 
(e.g. reformatting data in the view 16), then the controller 18 may directly interact 
with the view 16 without the model 12. Alternatively, if the appropriate action 
involves alteration of intrinsic properties of data (e.g., values of data in the model 12), 
then the controller 18 may act to update the corresponding data in the model 12 and 
display the data in the view 16. 

[0016] FIG. 2 is a block diagram illustrating an exemplary web presentation 

architecture ("WPA") 100 in accordance with certain embodiments of the present 
invention. The illustrated WPA 100, which maybe adapted to execute on a 
processor-based device such as a computer system or the like, has certain core 
features of the MVC computing strategy, and various additional features and 
enhancements to improve its architectural operation and performance. For example, 
the illustrated WPA 100 separates the model, the view, and the controller as with the 
traditional MVC architecture, yet the WPA 100 provides additional functionality to 
promote modularity, flexibility, and efficiency. 

[0017] As illustrated, the WPA 100 comprises a WPA controller 102 having 

a preprocessor 104, a localization manager 106, the navigation manager 108, a layout 
manager 1 10, a cookie manager 112, and object cache manager 114, and a 
configuration manager 1 16. The WPA controller 102 functions as an intermediary 
between the client 14, form objects 118, action classes 120, and views 122. In turn, 
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the action classes 120 act as intermediaries for creating/manipulating model objects 
124 and executing WPA logic 126, such as an error manager 128, a performance 
manager 130, and activity manager 132, and a backend service manager 134. As 
described below, the backend service manager 134 functions to interface backend 
services 136. Once created, the model objects 124 can supply data to the view 122, 
which can also call various tag libraries 142 such as WPA tag libraries 144 and 
service tag libraries 146. 

[0018] In operation, the client 14 sends a request 148 to the WPA 100 for 

processing and transmission of a suitable response 150 back to the client 14. For 
example, the request 148 may comprise a data query, data entry, data modification, 
page navigation, or any other desired transaction. As illustrated, the WPA 100 
intakes the request 148 at the WPA controller 102, which is responsible for various 
control and flow logic among the various model-view-controller divisions of the 
WPA 100. For example, the WPA controller 102 can be implemented as a Servlet, 
such as a HyperText Transfer Protocol ("HTTP") Servlet, which extends the 
ActionServlet class of Struts (an application framework promulgated by the Jakarta 
Project of the Apache Software Foundation). As illustrated, the WPA controller 102 
invokes a configuration resource file 152, which provides mapping information for 
form classes, action classes, and other objects. Based on the particular request 148, 
the WPA controller 102 locates the appropriate action class and, also, the appropriate 
form class if the request 148 contains form data (e.g., client data input). For example, 
the WPA controller 102 may lookup a desired WPA Action Form and/or WPA 
Action Class, which function as interfaces to WPA Form Objects and WPA Action 
Objects. 
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[0019] If the client entered data, then the WPA controller 102 creates and 

populates the appropriate form object 1 1 8 as indicated by arrow 1 54. The form 
object 1 1 8 may comprise any suitable data objects type, such as a JavaBean, which 
functions to store the client entered data transmitted via the request 148. The WPA 
controller 102 then regains control as indicated by arrow 156. 

[0020] If the client did not enter data, or upon creation and population of the 

appropriate form object 118, then the WPA controller 102 invokes the action class 
120 to execute various logic suitable to the request 148 as indicated by arrow 158. 
For example, the action class 120 may call and execute various business logic or 
WPA logic 126, as indicated by arrow 160 and discussed in further detail below. The 
action class 120 then creates or interacts with the model object 124 as indicated by 
arrow 162. The model object 124 may comprise any suitable data object type, such 
as a JavaBean, which functions to maintain the application state of certain data. One 
example of the model object 124 is a shopping cart JavaBean, which stores various 
user data and e-commerce items selected by the client. However, a wide variety of 
model objects 124 are within the scope of the WPA 100. After executing the desired 
logic, the action class 120 forwards control back to the WPA controller 102 as 
indicated by arrow 164, which may be referred to as an "action forward." This action 
forward 164 generally involves transmitting the path or location of the server-side 
page, e.g., the JSP. 

[0021] As indicated by arrow 166, the WPA controller 12 then invokes the 

foregoing server-side page as the view 122. Accordingly, the view 122 interprets its 
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links or tags to retrieve data from the model object 124 as indicated by arrow 168. 
Although a single model object 124 is illustrated, the view 122 may retrieve data 
from a wide variety of model objects. In addition, the view 122 interprets any special 
logic links or tags to invoke tag libraries 142 as indicated by arrow 170. For example, 
the WPA tag libraries 144 and the service tag libraries 146 can include various 
custom or standard logic tag libraries, such as <html>, <logic>, <template> 
developed as part of the Apache Jakarta Project or the like. Accordingly, the tag 
libraries 142 further separate the logic from the content of the view 122, thereby 
facilitating flexibility and modularity. In certain cases, the tag libraries 142 also may 
interact with the model object 124 as indicated by arrow 172. For example, a special 
tag may execute logic to retrieve data from the model object 124 and manipulate the 
retrieved data for use by the view 122. After interacting with the model object 124 
and the appropriate tag libraries 142, the WPA 100 executes the view 122 (e.g., JSP) 
to create a client-side page for the client 14 as indicated by arrow 174. For example, 
the client-side page may comprise an extended markup language ("XML") or HTML 
formatted page, which the WPA controller 102 returns to the client 14 via the 
response 150. 

[0022] As discussed above, the WPA 100 comprises a variety of unique logic 

and functional components, such as control components 104 through 1 16 and logic 
128 through 134, to enhance the performance of the overall architecture and specific 
features 100. These components and logic generally operate on the server-side of the 
WPA 100, yet there are certain performance improvements that may be apparent on 
the client-side. These various components, while illustrated as subcomponents of the 
controller 102 or types of logic 126, may be standalone or integrated with various 
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other portions of the WPA 100. Accordingly, the illustrated organization of these 
components is simply one exemplary embodiment of the WPA 100, while other 
organizational embodiments are within the scope of the present technique. 

[0023] Turning to the subcomponents of the WPA controller 1 02, the 

preprocessor 104 provides preprocessing of requests by configuring portal specific 
functions to execute for each incoming request registered to the specific portal. The 
preprocessor 104 identifies the appropriate portal specific functions according to a 
preset mapping, e.g., a portal-to-function mapping in the configuration file 152. 
Upon completion, the preprocessor 104 can redirect to a remote Uniform Resource 
Identifier (URI), forward to a local URI, or return and continue with the normal 
processing of the request 148 by the WPA controller 102. One example of such a 
preprocessing function is a locale, which is generally comprised of language 
preferences, location, and so forth. The preprocessor 104 can preprocess local logic 
corresponding to a particular portal, thereby presetting language preferences for 
subsequent pages in a particular application. 

[0024] The locale information is also used by the localization manager 106, 

which functions to render localized versions of entire static pages rather than breaking 
up the static page into many message strings or keys. Instead of using a single page 
for all languages and obtaining localized strings from other sources at run time, the 
localization manager 106 looks up a localized page according to a locale identifier 
according to a preset mapping, e.g., a locale-to-localized page mapping in the 
configuration file 152. For example, the capability to render static localized pages in 
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the localization manager 106 is particularly useful for static information, such as 
voluminous help pages. 

[0025] The navigation manager 108 generally functions to save a users 

intended destination and subsequently recall that information to redirect the user back 
to the intended destination. For example, if the user intends to navigate from point A 
to point B and point B queries for certain logic at point C (e.g., a user login and 
password), then the navigation manager 108 saves the address of point B, proceeds to 
the requested logic at point C, and subsequently redirects the user back to point B. 

[0026] The layout manager 1 1 0 enables a portal to separate the context logic 

functioning to render the common context from the content logic functioning to 
render the content portion of the page. The common context (e.g., C-Frame) may 
include a header, a bottom portion or footer, and a side portion or side bar, which 
collectively provides the common look and feel and navigational context of the page. 

[0027] The cookie manager 1 12 functions to handle multiple cookie requests 

and to set the cookie value based on the most recent cookie request before 
committing a response. For example, in scenarios where multiple action classes 
attempt to set a particular cookie value, the cookie manager 112 caches the various 
cookie requests and defers setting the cookie value until response time. In this 
manner, the cookie manager 112 ensures that different action classes do not erase 
cookie values set by one another and, also, that only one cookie can exist with a 
particular name, domain, and path. 
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[0028] The object cache manager 1 14 enables applications to create 

customized in-memory cache for storing objects having data originating from 
backend data stores, such as databases or service based frameworks (e.g., Web 
Services Description Language "WSDL"). The in-memory cache may be customized 
according to a variety of criteria, such as cache size, cache scope, cache replacement 
policy, and time to expire cache objects. In operation, the object cache manager 1 14 
improves performance by reducing processing time associated with the data from the 
backend data stores. Instead of retrieving the data from the backend data stores for 
each individual request 148, the object cache manager 1 14 caches the retrieved data 
for subsequent use in processing later requests. 

[0029] The configuration manager 1 16 functions to oversee the loading of 

frequently used information, such as an error code table, into memory at startup time 
of a particular web application. The configuration manager 116 may retain this 
information in memory for the duration of an application server session, thereby 
improving performance by eliminating the need to load the information each time the 
server receives a request. 

[0030] Turning to the WPA logic 126, the error handler or manager 128 

functions to track or chain errors occurring in series, catalog error messages based 
on error codes, and display error messages using an error catalog. The error 
catalog of the error manager 128 may enable the use of generic error pages, which 
the error manager 128 populates with the appropriate error message at run time 
according to the error catalog. 
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[0031] The WPA logic function 126 may comprise performance and 

activity managers 130 and 132, which may facilitate tracking and logging of 
information associated with a particular transaction or request. The error manager 
128 may also be adapted to participate in tracking and logging operations as well. 

[0032] The service manager 134 of the WPA logic 126 functions as an 

interface between the WPA 100 and various backend services 136. In operation, 
the service manager 134 communicates with the desired backend service 136 
according to the client request 148, parses a response from the backend service 136 
to obtain the appropriate data, and pass it to the appropriate object of WPA 100. 

[0033] Turning now to FIG. 3, an exemplary cookie management process 

200 of the cooking manager 1 12 is described according to certain embodiments of 
the present technique. As described in detail below, the cookie manager 112 
handles multiple cookie requests to ensure that the most recent cookie value is 
returned to the client 14 in the response 150. At the beginning of each request 148, 
the WPA controller 102 executes logic 202 that instantiates a new cookie manager 
1 12, as indicated by arrow 204. The WPA controller 102 then stores the new 
cookie manager 1 12 in a request-scoped variable 206. Any actions that are 
invoked over the course of the request 148 can use an add cookie method of the 
cookie manager 1 12 to specify cookies that should be sent back to the requesting 
client 14. Before sending the response 150 back to the requesting client 14, the 
WPA controller 102 calls a commit method of the cookie manager 1 12 to 
determine the appropriate cookie value for the response 150, as indicated by arrow 
208. 
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[0034] As illustrated in FIG. 3, the WPA controller 102 may invoke a 

plurality of actions, such as actions 210 and 212, over the course of the request 
148. Many of these actions may attempt to create or modify the same cookie 
value. For example, the WPA controller 102 may invoke the action 210 to perform 
a particular function 214, as indicated by arrow 216. In operation, the action 210 
can invoke an add cookie method of the cookie manager 1 12 to add a new or 
modified cookie value corresponding to the particular function 214, as indicated by 
arrow 218. The action 210 also may invoke the action 212 to perform a particular 
function 220, as indicated by arrow 222. Again, the action 212 can invoke an add 
cookie method of the cookie manager 1 12 to add a new or modified cookie value 
corresponding to the particular function 220, as indicated by arrow 224. Upon 
completion, the action 212 returns control to the action 210, as indicated by arrow 
226. In turn, upon completion of the action 210, control is returned to the WPA 
controller 102, as indicated by arrow 228. As noted above, the actions 210 and 
212 may operate to set the same cookie value over the course of processing the 
request 148. 

[0035] Prior to sending the response 150 back to the client 14, the WPA 

controller 102 invokes the commit method 208 of the cooking manager 1 12 to 
evaluate the various cookies provided by the add cookie methods 218 and 224. 
The cookie manager 112 then selects the appropriate cookie value (e.g., most 
recent cookie value) for commitment by the WPA controller in the response 152 to 
the client 14. In this matter, the cookie manager 1 12 acts as a buffer to 
accommodate multiple uses of a particular cookie (e.g., different values for a 

16 



PDNO:200208017-1 



particular name, domain, and path), thereby deferring commitment of the cookie 
value until the WPA is ready to provide the response 150. Accordingly, the cookie 
manager 1 12 ensures that only one cookie with a particular name, domain, and 
path is transmitted back to the client. 

[0036] The add cookie methods 218 and 224 may comprise the following 

format to add a cookie "c" to the queue of the cookie manager 1 12: 

public void addCookie(javax.servlet.http. Cookie c) 

If a cookie with the same name, domain, and path has already been added, then the 
new cookie overrides the previous one. Accordingly, the add cookie methods 218 
and 224 ensure that only the most recent cookie exists with a particular name, 
domain, and path. 

[0037] The commit cookie method 208 may comprise the following format 

to commit the appropriate cookie: 

public void commit(javax.servlet.http.HttpServletResponse response) 

Again, the WPA controller 102 calls this commit cookie method 208 prior to the 
response 150, thereby ensuring that the most recent values of all queued cookies 
are transmitted in the response 150. In this manner, the cookie manager 112 defers 
the creation of set cookie HTTP headers until directly before the WPA controller 
102 commits the response 150. 
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[0038] While the invention may be susceptible to various modifications 

and alternative forms, specific embodiments have been shown by way of example 
in the drawings and will be described in detail herein. However, it should be 
understood that the invention is not intended to be limited to the particular forms 
disclosed. Rather, the invention is to cover all modifications, equivalents and 
alternatives falling within the spirit and scope of the invention as defined by the 
following appended claims. 
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